Use oci.With helpers

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
This commit is contained in:
Andrey Smirnov
2019-07-18 17:34:59 +03:00
parent 0abd2ca506
commit 5dbb31a212

View File

@@ -101,11 +101,11 @@ func GenerateSpec(ctx context.Context, meta executor.Meta, mounts []executor.Mou
}
if meta.SecurityMode == pb.SecurityMode_INSECURE {
//make sysfs rw mount for insecure mode.
for i, m := range s.Mounts {
if m.Destination == "/sys/fs/cgroup" {
s.Mounts[i].Options = []string{"nosuid", "noexec", "nodev", "rw"}
}
if err = oci.WithWriteableCgroupfs(ctx, nil, c, s); err != nil {
return nil, nil, err
}
if err = oci.WithWriteableSysfs(ctx, nil, c, s); err != nil {
return nil, nil, err
}
}